SMBv1
No CISA KEV deadline is open. CISA last added a SMBv1 CVE on 10 Feb 2022.
Tracked since 12 May · latest article Tue 12 May · RSS
Exploited, by due date
CSV downloadDeadlines passed
One article so far, 12 May. A pattern appears once more outlets cover SMBv1.
- WannaCry worm spreads globally after exploiting Windows SMB flawSecurity Affairs
All CVEs in coverage
1How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.